Fix TodoPanel sidebar overflow & migrate CI from Bun to Vite+

[harrryyd]

Summary

• Fix TodoPanel detail panel overflowing the sidebar boundary
• Migrate CI pipeline from Bun to Vite+ (pnpm) across all workflows
• Add managed relay tunnels and APN service for T3 Cloud
• Set up mobile EAS preview workflow and mobile native static analysis
• Vendor Alchemy reference repo subtree
• Add .env.example for optional T3 Cloud build config
• Various release workflow fixes (desktop packaging, artifact arch, dep closures)
• Fix shell-avoidance for system executables, Node spawns, and Windows env probe
• Add Claude Opus 4.8 support and maintain reasoning selections across providers
• Restructure docs into topical folders

Testing

• CI check, test, and test_browser jobs pass on this branch
• TodoPanel overflow fix verified in local dev — detail panel no longer clips sidebar
• Release smoke test passes
• Desktop artifact builds verified (preload bundle output checked)
• Not run: mobile EAS preview (EXPO_TOKEN unavailable in CI fork)
• Not run: relay deploy (requires production secrets)

[chatgpt-codex-connector]

💡 Codex Review

h-code/packages/shared/package.json

Lines 153 to 154 in a6c045b

	}
	}

Remove the stray exports brace

This newly added export leaves packages/shared/package.json with one too many closing braces: JSON.parse now fails at line 155, so any fresh checkout where setup-vp/pnpm reads workspace manifests will fail before install, vp check, typecheck, or tests can run. The ./relayClient block should close the exports object only once.

---

h-code/scripts/build-desktop-artifact.ts

Lines 925 to 929 in a6c045b

	devDependencies: {
	electron: electronVersion,
	},
	overrides: resolvedOverrides,
	...(stagePnpmConfig ? { pnpm: stagePnpmConfig } : {}),

Carry build-script approvals into staged installs

The staged desktop package.json only receives pnpm.patchedDependencies, but the install runs in a temporary stageAppDir outside the workspace, so the root pnpm-workspace.yaml onlyBuiltDependencies allowlist no longer applies. With pnpm 10, dependency lifecycle scripts are skipped unless approved; this stage includes production node-pty, so its native binding will not be built and packaged desktop terminals can fail at runtime even though the artifact build completes.

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".